prevent entering URL to avoid authentication

[super petboy, geändert vor 16 Jahren.]

HI. I use liferay to develop portal application. If one invalid user happened to know the URL which the manager user got through the normal portlet request process. How can I prevent the invalid user from operating the pages or other resources via entering the URL address directly that only manager user can access? Can servlet filter handle this problem? Or is there any more intuitive way in LIFERAY? I'd appreciate that you could give me a sample on how to solve this problem!